added my custom msp powershell scripts

2026-07-07 16:34:11 -04:00
parent 61cdd43f50
commit a8d1f7321f
4 changed files with 102 additions and 0 deletions
@@ -0,0 +1,49 @@
+#offboarding script
+
+$tenantAdminUsername = "admin@example.com"
+$tenantID = "31537af4-6d77-4bb9-a681-d2394888ea26"
+$userEmail = "example@example.com"
+$forwardingAddress = "example2@example.com"
+
+echo "Connecting to 365..."
+Connect-MgGraph -NoWelcome -TenantId $tenantID
+Pause
+
+echo "Connecting to exchange online..."
+Connect-ExchangeOnline -UserPrincipalName $tenantAdminUsername
+Pause
+
+echo "Connecting to MSOnline..."
+Connect-MsolService
+Pause
+
+$user = Get-MgUser -UserId $userEmail
+echo "Making user a shared mailbox..."
+Set-Mailbox $userEmail -Type Shared
+
+echo "Waiting 60 seconds for the changes to apply..."
+Start-Sleep -Seconds 60
+
+Get-Mailbox -Identity $userEmail | Format-Table Name, RecipientTypeDetails
+echo "Made user a shared mailbox, make sure this applied by reading the above. If not, hit ctrl+C, because the script is about to remove their 365 license next"
+Pause
+
+echo "Setting up email forwarding..."
+Set-Mailbox -Identity $userEmail -DeliverToMailboxAndForward $true -ForwardingSMTPAddress $forwardingAddress
+Pause
+
+echo "Continuing after making shared mailbox..."
+$businesspremiumlicense = Get-MgSubscribedSku -All | Where SkuPartNumber -eq 'SPB'
+Set-MgUserLicense -UserId $userEmail -RemoveLicenses @($businesspremiumlicense.SkuId) -AddLicenses @{}
+
+echo "Revoking sign-in sessions..."
+Revoke-MgUserSignInSession -UserId $userEmail
+Pause
+
+echo "Blocking sign-in..."
+Update-Mguser -UserId $userEmail -AccountEnabled:$false
+
+echo "Resetting MFA..."
+$userMfaAccount = Get-MsolUser -UserPrincipalName $userEmail
+Reset-MsolStrongAuthenticationMethodByUpn -UserPrincipalName $userMfaAccount.Userprincipalname
+